Sync Groupv6
Examples for High Availability (VRRP) using IPv6 — sync-groups
Two VRRP devices in same sync-group
Description
Configure 2 DUTs in the same sync-group to check that they do communicate between each other.
Scenario
Note
VRRP Sync Groups allow you to synchronize the state of multiple VRRP instances in a router, ensuring they all transition to the same state (either MASTER or BACKUP) together. Two routers with instances in the same sync group can communicate between each other so their states are different.
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address '20::1/64' set interfaces ethernet eth0 vrrp vrrp-group 1 sync-group MAIN0 set interfaces ethernet eth0 vrrp vrrp-group 1 virtual-address '10::1' set interfaces ethernet eth1 address '20::10/64' set interfaces ethernet eth1 vrrp vrrp-group 2 sync-group MAIN0 set interfaces ethernet eth1 vrrp vrrp-group 2 virtual-address '10::2' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system vrrp sync-group MAIN0
Note
Both instances have the same state.
Step 2: Run the command system vrrp show on DUT0 and check whether the output matches the following regular expressions:
eth0 1 MASTER MAIN0 eth1 2 MASTER MAIN0Show output
-------------------------------------------------------------------------------- Interface Group State RFC Compliant Addr Owner Last Transition Sync Group -------------------------------------------------------------------------------- eth0 1 MASTER yes no 0:00:01 MAIN0 eth1 2 MASTER yes no 0:00:01 MAIN0
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address '20::2/64' set interfaces ethernet eth0 vrrp vrrp-group 3 sync-group MAIN0 set interfaces ethernet eth0 vrrp vrrp-group 3 virtual-address '10::1' set interfaces ethernet eth1 address '20::20/64' set interfaces ethernet eth1 vrrp vrrp-group 4 sync-group MAIN0 set interfaces ethernet eth1 vrrp vrrp-group 4 virtual-address '10::2' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system vrrp sync-group MAIN0
Note
Both instances have the same state.
Step 4: Run the command system vrrp show on DUT1 and check whether the output matches the following regular expressions:
eth0 3 BACKUP MAIN0 eth1 4 BACKUP MAIN0Show output
-------------------------------------------------------------------------------- Interface Group State RFC Compliant Addr Owner Last Transition Sync Group -------------------------------------------------------------------------------- eth0 3 BACKUP yes no 0:00:01 MAIN0 eth1 4 BACKUP yes no 0:00:01 MAIN0
Step 5: Modify the following configuration lines in DUT0 :
set interfaces ethernet eth0 vrrp vrrp-group 1 disable
Note
It does not matter that only vrrp-group 1 is disabled, since all instances are in the same sync group they all change their state.
Step 6: Run the command system vrrp show on DUT0 and check whether the output matches the following regular expressions:
eth0 1 BACKUP MAIN0 eth1 2 BACKUP MAIN0Show output
-------------------------------------------------------------------------------- Interface Group State RFC Compliant Addr Owner Last Transition Sync Group -------------------------------------------------------------------------------- eth0 1 BACKUP yes no 0:00:00 MAIN0 eth1 2 BACKUP yes no 0:00:00 MAIN0
Step 7: Run the command system vrrp show on DUT1 and check whether the output matches the following regular expressions:
eth0 3 MASTER MAIN0 eth1 4 MASTER MAIN0Show output
-------------------------------------------------------------------------------- Interface Group State RFC Compliant Addr Owner Last Transition Sync Group -------------------------------------------------------------------------------- eth0 3 MASTER yes no 0:00:01 MAIN0 eth1 4 MASTER yes no 0:00:01 MAIN0
Two VRRP devices in different sync-group
Description
Configure 2 DUTs in different sync-groups to check that they do not communicate between each other.
Scenario
Note
VRRP Sync Groups allow you to synchronize the state of multiple VRRP instances in a router, ensuring they all transition to the same state (either MASTER or BACKUP) together. Two routers with instances in the different sync groups cannot communicate between each other so their states are the same.
Step 1: Set the following configuration in DUT0 :
set interfaces ethernet eth0 address '20::1/64' set interfaces ethernet eth0 vrrp vrrp-group 1 sync-group MAIN0 set interfaces ethernet eth0 vrrp vrrp-group 1 virtual-address '10::1' set interfaces ethernet eth1 address '20::10/64' set interfaces ethernet eth1 vrrp vrrp-group 2 sync-group MAIN0 set interfaces ethernet eth1 vrrp vrrp-group 2 virtual-address '10::2' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system vrrp sync-group MAIN0
Note
Both instances have the same state.
Step 2: Run the command system vrrp show on DUT0 and check whether the output matches the following regular expressions:
eth0 1 MASTER MAIN0 eth1 2 MASTER MAIN0Show output
-------------------------------------------------------------------------------- Interface Group State RFC Compliant Addr Owner Last Transition Sync Group -------------------------------------------------------------------------------- eth0 1 MASTER yes no 0:00:02 MAIN0 eth1 2 MASTER yes no 0:00:02 MAIN0
Step 3: Set the following configuration in DUT1 :
set interfaces ethernet eth0 address '20::2/64' set interfaces ethernet eth0 vrrp vrrp-group 3 sync-group MAIN1 set interfaces ethernet eth0 vrrp vrrp-group 3 virtual-address '10::1' set interfaces ethernet eth1 address '20::20/64' set interfaces ethernet eth1 vrrp vrrp-group 4 sync-group MAIN1 set interfaces ethernet eth1 vrrp vrrp-group 4 virtual-address '10::2' set system login user admin authentication encrypted-password '$6$GSjsCj8gHLv$/VcqU6FLi6CT2Oxn0MJQ2C2tqnRDrYKNF8HIYWJp68nvXvPdFccDsT04.WtigUONbKYrgKg8d6rEs8PjljMkH0' set system vrrp sync-group MAIN1
Note
Both instances have the same state.
Step 4: Run the command system vrrp show on DUT1 and check whether the output matches the following regular expressions:
eth0 3 MASTER MAIN1 eth1 4 MASTER MAIN1Show output
-------------------------------------------------------------------------------- Interface Group State RFC Compliant Addr Owner Last Transition Sync Group -------------------------------------------------------------------------------- eth0 3 MASTER yes no 0:00:01 MAIN1 eth1 4 MASTER yes no 0:00:01 MAIN1
Step 5: Modify the following configuration lines in DUT0 :
set interfaces ethernet eth0 vrrp vrrp-group 1 disable
Note
It does not matter that only vrrp-group 1 is disabled, since both instances in DUT0 are in the same sync group they both share the same state, but DUT0 and DUT1 do not communicate with each other, so their states do not change.
Step 6: Run the command system vrrp show on DUT0 and check whether the output matches the following regular expressions:
eth0 1 MASTER MAIN0 eth1 2 MASTER MAIN0Show output
-------------------------------------------------------------------------------- Interface Group State RFC Compliant Addr Owner Last Transition Sync Group -------------------------------------------------------------------------------- eth0 1 MASTER yes no 0:00:01 MAIN0 eth1 2 MASTER yes no 0:00:01 MAIN0
Step 7: Run the command system vrrp show on DUT1 and check whether the output matches the following regular expressions:
eth0 3 MASTER MAIN1 eth1 4 MASTER MAIN1Show output
-------------------------------------------------------------------------------- Interface Group State RFC Compliant Addr Owner Last Transition Sync Group -------------------------------------------------------------------------------- eth0 3 MASTER yes no 0:00:07 MAIN1 eth1 4 MASTER yes no 0:00:07 MAIN1